Frequently asked questions
Is this legal?
Yes. Every job targets only the sandboxed SQLite database in your browser. The practice payload never reaches a real system; site delivery and optional account sync are separate from the target.
Do I need to install anything?
No. It runs in a modern browser. The database engine (SQLite compiled to WebAssembly) loads on demand the first time you need it — no account needed, no downloads, no setup.
Do I need to know SQL already?
It helps. The game assumes you can read a SELECT and roughly follow a WHERE clause. It teaches you injection — not SQL from zero. If queries are brand new to you, learn the basics first, then come pull a job.
Are you teaching people to attack real websites?
We teach how injection works so you can recognise it and close it — every job ends with the fix, not the break-in. Use what you learn only on systems you own or have explicit permission to test. Anywhere else is a crime, and that's on you.
Where is my progress saved?
On this device, in your browser's local storage. Anonymous play uses no account and no server, so we never see it — sign in and your progress also syncs to your account. Clear your browser data, or open the game somewhere else, and local play starts fresh.
Does it cost anything?
No. It's free to play.
The engine won’t load, or something looks broken.
Refresh first. If it still won't start, your browser may be blocking WebAssembly or running in a locked-down mode — try a current version of Chrome, Firefox, or Safari with default settings.
Can I play in my language?
English, Turkish, and Polish. Use the language switch in the nav — the whole site and game chrome follow.
Still stuck?
The how-it-works page walks through a full job, or leave word and we'll get back to you.